Unrated severityNVD Advisory· Published Feb 19, 2009· Updated Apr 23, 2026
CVE-2008-4392
CVE-2008-4392
Description
dnscache in Daniel J. Bernstein djbdns 1.05 does not prevent simultaneous identical outbound DNS queries, which makes it easier for remote attackers to spoof DNS responses, as demonstrated by a spoofed A record in the Additional section of a response to a Start of Authority (SOA) query.
Affected products
1- cpe:2.3:a:d.j.bernstein:djbdns:1.05:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- www.your.org/dnscache/nvdPatchVendor Advisory
- secunia.com/advisories/33855nvdVendor Advisory
- www.your.org/dnscache/djbdns.pdfnvdVendor Advisory
- www.securityfocus.com/bid/33818nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/48807nvd
News mentions
0No linked articles in our index yet.